CVE-2017-2874

CVE-2017-2874 affects the Foscam C1 Indoor HD Camera via the devMng Multi-Camera interface over UDP ports 10000/10001. The information-disclosure vulnerability can be triggered by an unauthenticated remote attacker using the find command (0x0000) to retrieve sensitive device data, including MAC a...

Foscam IP Video Camera devMng Multi-Camera Port 10000 Command 0x0000 Information Disclosure Vulnerability(CVE-2017-2874)

Summary An information disclosure vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 can allow for a user to retrieve sensitive information without authentication. Tested...